Configuring Bridge Assurance - Cisco Catalyst 4500 Series Software Configuration Manual

Chapter 26 Configuring Optional STP Features
Observe these guidelines when configuring Bridge Assurance:
•
•
•
•
•
•
•

Configuring Bridge Assurance

Command
Step 1
Switch # configure terminal
Step 2
Switch(config)# spanning-tree bridge assurance
Step 3
Switch(config-if)# end
Step 4
Switch# show spanning-tree summary
This example show how to display spanning tree information and verify if Bridge Assurance is enabled.
Look for these details in the output:
•
•
Switch# show spanning-tree summary
Switch is in rapid-pvst mode
Root bridge for: VLAN0199-VLAN0200, VLAN0128
EtherChannel misconfig guard
Extended system ID
Portfast Default
Portfast Edge BPDU Guard Default
Portfast Edge BPDU Filter Default
Loopguard Default
PVST Simulation Default
Bridge Assurance
UplinkFast
BackboneFast
It can be enabled or disabled globally.
It applies to all operational network ports, including alternate and backup ports.
Only Rapid PVST+ and MST spanning tree protocols support Bridge Assurance. PVST+ does not
support Bridge Assurance.
For Bridge Assurance to work properly, it must be supported and configured on both ends of a
point-to-point link. If the device on one side of the link has Bridge Assurance enabled and the device
on the other side does not, then the connecting port is blocked (a Bridge Assurance inconsistent
state). We recommend that you enable Bridge Assurance throughout your network.
To enable Bridge Assurance on a port, BPDU filtering and BPDU Guard must be disabled.
You can enable Bridge Assurance in conjunction with Loop Guard.
You can enable Bridge Assurance in conjunction with Root Guard. The latter is designed to provide
a way to enforce the root bridge placement in the network.
Portfast Default—Network
Bridge Assurance—Enabled
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Purpose
Enters the global configuration mode.
Enables Bridge Assurance on all network ports on the
switch.
Bridge Assurance is enabled by default.
Use the no version of the command to disable the feature.
Disabling Bridge Assurance causes all configured
network ports to behave as normal spanning tree ports.
Exits configuration mode.
Displays spanning tree information and shows if Bridge
Assurance is enabled
is enabled
is enabled
is network
is disabled
is disabled
is enabled
is enabled but inactive in rapid-pvst mode
is enabled
is disabled
is disabled
Configuring Bridge Assurance
26-13